Privacy Policy

Tiny Cities (“Tiny Cities,” “we,” “us”) is a collectible souvenir app that turns the cities you’ve visited into little snow globes. This policy explains what we collect, why, and the choices you have. In short: the app caches your travel memories on your device and privately syncs them through an automatically created anonymous account. We don’t sell your data, run ads, track your location, or use third-party analytics.

1. Data We Collect

We collect only what the app needs to render, privately sync, and recover your collection.

• Your travel records.The cities you add, visit dates, personal notes, “someday” wishlist places, home cities, and the styling you choose for each globe. Travel is recorded on the honor system — there is no GPS or location tracking.
• Account information. By default the app creates an anonymous account so your collection can sync. If you choose Sign in with Apple or Google, we receive the identifier (and, where you allow it, the name and email) that service provides.
• Profile & onboarding details. An optional display name, your nationality (for passport styling), and optional onboarding answers (age range, how often you travel, and how you found the app).
• Photos (optional). A photo you tuck behind a globe is cached on your device and uploaded to a private, per-user area of our storage so it can return with the rest of your collection.
• Device & app information.When you open the app it records the device it is running on: model, operating system version, app version and build, screen size, language, region and time zone, network type (Wi‑Fi or cellular), and whether you have allowed notifications. We use it to fix bugs, to decide which operating system versions a release can still support, and to size the artwork to real screens. This describes the device, not where you are — there is no GPS, no advertising identifier, and we do not record the name you gave your phone.
• Purchases.If you subscribe to First Class, we and our billing provider receive your subscription status. We never receive your card or payment details — Apple handles payment.

2. What We Do Not Collect

We do not collect your location or GPS data, we do not use advertising SDKs or cross-app trackers, and we do not sell or rent your personal information to anyone. We do use one analytics provider, PostHog, to understand how the app is used; events are tied to your account identifier and are never shared with advertisers.

3. How We Use Your Data

• To render your collection, passport, and stats inside the app.
• To privately sync your collection and recover it after you link Apple or Google.
• To generate each city’s artwork (see “AI Image Generation” below).
• To provide and manage First Class subscriptions.
• To respond to your support requests.

4. AI Image Generation

Each new city’s diorama is created through fal.ai using an OpenAI image model. To make one, our server sends only the city’s name, country, and a short description of its landmark— never your notes or photos. Every city’s art is generated once and shared by all users, so most cities are already made and require no new request. Your photos are never sent to the image service and are never used to train any AI model.

5. Service Providers

We share data only with the providers that make the app run:

• Supabase— hosts authentication, our database, and private photo storage. Your collection rows are private to your account.
• Apple— Sign in with Apple and App Store payments.
• Google— Google Sign-In, if you choose it.
• RevenueCat— manages subscription status. It receives your account identifier, optional display name, and purchase state; not your payment details.
• PostHog— product analytics. It receives which screens and actions are used, your device and app information, and your account identifier — never your notes, photos, or the contents of your collection.
• fal.ai and OpenAI— fal.ai runs the OpenAI image model that generates city artwork from the city text described above. They do not receive your notes or photos.
• Telegram— may deliver an operational alert to the app owner when a previously unavailable city is generated. The alert can include the generated city image, your internal account identifier, and an optional display name and sign-in provider. It is used for generation quality and cost monitoring, not marketing.

6. Storage, Security & Retention

Your collection is cached on your device and synced to a private account on our backend, protected by row-level security so only that account can read or write it. The app starts with an anonymous account whose recovery credential lives on that installation. Linking Apple or Google makes the same collection recoverable on another device. We keep your data for as long as your account exists.

7. Your Rights & Choices

You can access, correct, or delete your data in the app. You may edit or remove any city, note, or photo directly in the app. To request a copy of your data, or to delete your account and everything associated with it, email us at ramin.afandiyev666@gmail.com and we will action it. Depending on where you live, you may have additional rights under the GDPR or CCPA; we honor these regardless of location.

8. Children

Tiny Cities is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.

9. International Transfers

Our providers may process and store data on servers outside your country. Where required, we rely on appropriate safeguards for such transfers.

10. Changes to This Policy

We may update this policy as the app evolves. Material changes will be reflected here with a new “last updated” date.

11. Contact

Privacy questions: ramin.afandiyev666@gmail.com